CVE-2009-1219

2009-04-0118:30:00

CWE-20

mitre

web.nvd.nist.gov

cve-2009-1219

sun calendar express

denial of service

remote attack

web server

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.7

Confidence

High

EPSS

0.146

Percentile

95.8%

JSON

Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter.

Affected configurations

Nvd

Node

sunjava_system_calendar_serverMatch6-sparc

sunjava_system_calendar_serverMatch6.3-sparc

sunone_calendar_serverMatch6.0-sparc

Node

sunjava_system_calendar_serverMatch6-x86

sunjava_system_calendar_serverMatch6.3-x86

sunone_calendar_serverMatch6.0-x86

Node

sunjava_system_calendar_serverMatch6-linux

sunjava_system_calendar_serverMatch6.3-linux

sunone_calendar_serverMatch6.0-linux

VendorProductVersionCPE
sunjava_system_calendar_server6cpe:2.3:a:sun:java_system_calendar_server:6:-:sparc:*:*:*:*:*
sunjava_system_calendar_server6.3cpe:2.3:a:sun:java_system_calendar_server:6.3:-:sparc:*:*:*:*:*
sunone_calendar_server6.0cpe:2.3:a:sun:one_calendar_server:6.0:-:sparc:*:*:*:*:*
sunjava_system_calendar_server6cpe:2.3:a:sun:java_system_calendar_server:6:-:x86:*:*:*:*:*
sunjava_system_calendar_server6.3cpe:2.3:a:sun:java_system_calendar_server:6.3:-:x86:*:*:*:*:*
sunone_calendar_server6.0cpe:2.3:a:sun:one_calendar_server:6.0:-:x86:*:*:*:*:*
sunjava_system_calendar_server6cpe:2.3:a:sun:java_system_calendar_server:6:-:linux:*:*:*:*:*
sunjava_system_calendar_server6.3cpe:2.3:a:sun:java_system_calendar_server:6.3:-:linux:*:*:*:*:*
sunone_calendar_server6.0cpe:2.3:a:sun:one_calendar_server:6.0:-:linux:*:*:*:*:*

Vendor	Product	Version	CPE
sun	java_system_calendar_server	6	cpe:2.3:a:sun:java_system_calendar_server:6:-:sparc:::::*
sun	java_system_calendar_server	6.3	cpe:2.3:a:sun:java_system_calendar_server:6.3:-:sparc:::::*
sun	one_calendar_server	6.0	cpe:2.3:a:sun:one_calendar_server:6.0:-:sparc:::::*
sun	java_system_calendar_server	6	cpe:2.3:a:sun:java_system_calendar_server:6:-:x86:::::*
sun	java_system_calendar_server	6.3	cpe:2.3:a:sun:java_system_calendar_server:6.3:-:x86:::::*
sun	one_calendar_server	6.0	cpe:2.3:a:sun:one_calendar_server:6.0:-:x86:::::*
sun	java_system_calendar_server	6	cpe:2.3:a:sun:java_system_calendar_server:6:-:linux:::::*
sun	java_system_calendar_server	6.3	cpe:2.3:a:sun:java_system_calendar_server:6.3:-:linux:::::*
sun	one_calendar_server	6.0	cpe:2.3:a:sun:one_calendar_server:6.0:-:linux:::::*